ENGLOBAL CORP

Item 1.05 Material Cybersecurity Incidents. As previously reported in the Original Form 8-K, on November 25, 2024, the Company became aware of a cybersecurity incident. The preliminary investigation revealed that a threat actor illegally accessed the Company’s information technology (“IT”) system and encrypted some of its data files. Upon detecting the unauthorized access, the Company immediately took steps to contain, assess and remediate the cybersecurity incident, including beginning an internal investigation, engaging external cybersecurity specialists, and restricting access to its IT system. The cybersecurity incident limited the Company’s ability to access portions of its business applications that supported aspects of the Company's operations and corporate functions, including financial and operating reporting systems for approximately six weeks. As of the date hereof, the Company's operations and corporate functions have been fully restored, and the Company believes that the threat actor no longer has access to the Company's IT system. As part of its remediation efforts, the Company is working with cybersecurity experts to reinforce its IT system, strengthen its surveillance of cybersecurity threats and prevent future unauthorized access to its IT system. The cybersecurity incident involved the threat actor’s access to a portion of the Company’s IT system that contained sensitive personal information. The Company intends to provide notifications to affected and potentially affected parties and applicable regulatory agencies as required by federal and state law. Based on the information available to the Company as of the date hereof, the Company believes that the incident has not had a material impact and is not reasonably likely to have a material impact, on th